App Control: File "[Sha256Hash]" was identified by Microsoft as malicious
book
Article ID: 286049
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
What are "App Control: File "[Sha256Hash]" was identified by Microsoft as malicious" events?
Environment
App Control: All Supported Versions
Resolution
These events are stemming from the SCEP connector that is configured under System Configuration (gear icon) > Connectors tab.
Additional Information
The SCEP connector has been deprecated and is no longer supported. In versions 8.1.6 and higher it will no longer show up in new installs and will be hidden if it is not enabled. It will be removed completely in a future version.